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Program breakpoint register and/or 
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chain 4 (Instruction Transfer 
Register) through Debug TAP or 
Use BKPT instruction directly in 
the code. 


BKPT instruction must reach execution 
stage. 


Halt/monitor 
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Program watchpoint register and/or 
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succeed with Instruction Address and/or 
CP15 Context ID ( 2 ). 
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C)- In monitor mode, breakpoints and watchpoints cannot be data-dependent. 

( 2 ): The cores have support for thread-aware breakpoints and watchpoints ,«\ oofcrteojoV*. co enable secure 
debug on some particular threads.,: ' 
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1: monitor mode 
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R/W by programming the ICE by the JTAG (scanl) 
■ R/W by using MRC/MCR instruction (CP 14) 


yes 


Secure debug 
enable bit 


0: debug in non- 
secure world only. 
1: debug in secure 
world and non- 
secure world 
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In functional mode or debug monitor mode: R/W by 
using ivi iv L^/ ivi rv lnsuucnon (Lritj ^oruy in secure 

supervisor mode) 

In Debug halt mode: No access - MCR/MRC 
instructions have any effect. 

(R/W by prograrriming the ICE by the JTAG (scanl) 
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(R/W by prograrnining the ICE by the JTAG (scanl) 
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user mode 
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possible in secure 
user mode 
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In functional mode or debug monitor mode: R/W by 
using MRC/MCR instruction (CP 1 4) (only m secure 
supervisor mode) 

In Debug halt mode: No access - MCR/MRC 
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CP 14 bits in Debug and Status Control register 
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bit 
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debug enable bit 
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No intrusive debug in entire secure world is possible. 
Any debug request, breakpoints, watchpoints, and other 
mechanism to enter debug state are ignored in entire 
secure world. 
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Debug in entire secure world is possible 
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Debug in secure user-mode only. Any debug request, 
breakpoints, watchpoints, and other mechanism to enter 
debug state are taken into account in user mode only. 
(Breakpoints and watchpoints linked or not to a thread 
ID are taken into account). Access in debug is restricted 
to what secure user can have access to. 
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Debug is possible only in some particular threads. In 
that case only thread-aware breakpoints and 
watchpoints linked to a thread ID are taken into account 
to enter debug state. Each thread can moreover debug 
its own code, and only its own code. 
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No observable debug in entire secure world is possible. 
Trace module (ETM) must not trace internal core 
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Trace is possible when the core is in secure user-mode 
only. 
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Trace is possible only when the core is executing some 
particular threads in secure user mode. Particular 
hardware must be dedicated for this, or re-use 
breakpoint register pair: Context ID match must enable 
trace instead of entering debug state. 
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(2) Note that when external or internal debug request is asserted, the core enters halt mode and not monitor mode. 
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Disabled for non-secure data abort and 
non-secure prefetch abort interruptions. 
For others interruption non-secure prefetch 
abort. 




Watchpoint hits 


Non-secure data abort handler 




Internal debug request 


Debug state in halt mode 




External debug request 


Debug state in halt mode 




Debug re-entry from system 
speed access 







( l ) As substitution of BKPT instruction in secure world from non-secure world is not possible, non-secure abort 
must handle the violation. 
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